Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
File: 001KO3R_ynAQOxfz29xQRcrOMt8.mft (raw, json)
Hash identifier: 4DGRwCSPY7Sk2fJEEXjEfVJo3lrg9qnJeWBFV6HKBT4=
Subject key identifier: EB:38:3E:0D:C1:A3:A4:F2:A5:C3:36:3F:89:79:EF:0D:27:AC:A3:B3
Authority key identifier: D3:4D:4A:3B:74:7F:CA:70:10:3B:17:F3:DB:DC:50:45:CA:CE:32:DF
Certificate issuer: /CN=d34d4a3b747fca70103b17f3dbdc5045cace32df
Certificate serial: 01A110E06E1C9435EECEC93E06C71DB7002B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
Manifest number: 1A8E
Signing time: Tue 06 Oct 2026 11:01:45 +0000
Manifest this update: Tue 06 Oct 2026 11:01:45 +0000
Manifest next update: Wed 07 Oct 2026 11:01:45 +0000
Files and hashes: 1: 001KO3R_ynAQOxfz29xQRcrOMt8.crl (hash: EXOPr+PRXNByw8tPenpeevHLA9rpZNV9fd4UmWsMfLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:e0:6e:1c:94:35:ee:ce:c9:3e:06:c7:1d:b7:00:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34d4a3b747fca70103b17f3dbdc5045cace32df
Validity
Not Before: Oct 6 11:01:45 2026 GMT
Not After : Oct 7 11:01:45 2026 GMT
Subject: CN=eb383e0dc1a3a4f2a5c3363f8979ef0d27aca3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a1:13:19:36:8d:95:54:c6:cd:1e:0a:9c:5b:
91:19:b3:86:39:e2:5c:cc:7d:2e:c2:4b:65:10:02:
c5:b4:ce:6a:88:12:13:e7:de:1e:a7:0b:12:2f:b3:
2f:c5:9c:26:02:f7:7e:df:f2:0b:ed:91:06:b7:ad:
43:a4:66:90:8b:42:3a:2c:74:22:c0:88:e3:b9:c6:
39:c4:12:1a:a4:7b:1a:e4:9d:11:93:58:42:a7:25:
e4:81:10:c1:61:6d:00:35:ad:45:40:2e:c7:a6:8f:
46:9f:2a:27:d1:13:59:36:ae:8c:e0:ca:7c:8b:4c:
49:5a:62:59:53:14:22:4c:d9:a4:f0:32:dd:ff:df:
77:02:cd:81:c8:b9:9f:f5:a2:ee:88:61:6d:e1:ac:
0a:f0:56:37:23:a2:c4:34:a7:dc:3e:7f:cd:fa:f2:
0e:b3:7f:2c:14:3d:b3:da:f8:82:89:25:50:46:dd:
db:3a:fa:3a:b8:7c:b9:a5:1d:f4:10:56:7c:84:96:
d4:0b:47:2f:38:68:9a:03:81:e6:5a:de:d4:e1:c0:
7a:02:00:cc:62:61:32:30:ac:c6:e2:34:d8:68:1c:
26:10:41:b3:2e:c3:bb:f7:4f:52:35:77:b0:96:38:
93:d8:2b:3c:65:2c:13:70:72:df:d7:a7:d0:ea:dd:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:38:3E:0D:C1:A3:A4:F2:A5:C3:36:3F:89:79:EF:0D:27:AC:A3:B3
X509v3 Authority Key Identifier:
keyid:D3:4D:4A:3B:74:7F:CA:70:10:3B:17:F3:DB:DC:50:45:CA:CE:32:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4f:b0:51:52:46:bd:c1:7e:ce:7e:ca:31:6d:39:86:0b:c7:
a3:d3:5d:bb:0c:42:48:95:3d:98:82:c3:54:0b:d4:af:70:3f:
08:c9:14:6c:61:ad:86:c5:68:ca:32:c2:bb:3d:ae:ae:52:9e:
7c:27:da:f6:99:ee:b8:3b:14:91:fa:ca:82:9b:bb:95:57:62:
85:2f:be:20:bd:a9:ec:89:40:15:c4:a3:e2:17:1d:4f:d5:ff:
a1:63:5b:50:80:3b:43:98:ba:c7:35:02:05:ab:dd:16:3b:cd:
14:d6:02:12:a9:bd:48:ff:ea:e4:f2:57:06:37:a8:29:63:67:
4c:27:1d:69:0b:8f:d7:50:12:cb:b0:9a:1b:09:1d:16:a2:32:
2c:1e:25:6b:0b:63:53:91:ab:83:b3:c3:6b:5e:9a:b4:14:bc:
d1:6c:02:b9:eb:20:ed:5e:93:7d:65:44:d4:4e:aa:75:3b:c3:
2b:c1:1c:c7:a7:48:6b:0f:e8:ef:24:42:95:c1:fd:88:48:b6:
07:df:26:d8:8b:8d:99:ac:40:51:bd:c8:33:b4:09:e9:a2:75:
22:2b:bd:57:24:01:24:98:47:9d:13:6f:8c:26:a7:90:88:e1:
18:41:df:4b:b0:11:56:78:35:59:74:1b:98:55:96:b0:3d:8c:
1b:d1:88:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEQ4G4clDXuzsk+BscdtwArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGQ0YTNiNzQ3ZmNhNzAxMDNiMTdmM2RiZGM1MDQ1Y2Fj
ZTMyZGYwHhcNMjYxMDA2MTEwMTQ1WhcNMjYxMDA3MTEwMTQ1WjAzMTEwLwYDVQQD
EyhlYjM4M2UwZGMxYTNhNGYyYTVjMzM2M2Y4OTc5ZWYwZDI3YWNhM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KETGTaNlVTGzR4KnFuRGbOGOeJc
zH0uwktlEALFtM5qiBIT594epwsSL7MvxZwmAvd+3/IL7ZEGt61DpGaQi0I6LHQi
wIjjucY5xBIapHsa5J0Rk1hCpyXkgRDBYW0ANa1FQC7Hpo9Gnyon0RNZNq6M4Mp8
i0xJWmJZUxQiTNmk8DLd/993As2ByLmf9aLuiGFt4awK8FY3I6LENKfcPn/N+vIO
s38sFD2z2viCiSVQRt3bOvo6uHy5pR30EFZ8hJbUC0cvOGiaA4HmWt7U4cB6AgDM
YmEyMKzG4jTYaBwmEEGzLsO7909SNXewljiT2Cs8ZSwTcHLf16fQ6t2wXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOs4Pg3Bo6TypcM2P4l57w0nrKOzMB8GA1UdIwQY
MBaAFNNNSjt0f8pwEDsX89vcUEXKzjLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDAxS08zUl95bkFRT3hmejI5eFFSY3JPTXQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84ZDgzNzItZTA3OS00ODMxLWFmZDIt
NDM3OTM0YzU4NDUzLzEvMDAxS08zUl95bkFRT3hmejI5eFFSY3JPTXQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi84ZDgzNzItZTA3OS00ODMxLWFmZDItNDM3OTM0YzU4NDUz
LzEvMDAxS08zUl95bkFRT3hmejI5eFFSY3JPTXQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0+wUVJG
vcF+zn7KMW05hgvHo9NduwxCSJU9mILDVAvUr3A/CMkUbGGthsVoyjLCuz2urlKe
fCfa9pnuuDsUkfrKgpu7lVdihS++IL2p7IlAFcSj4hcdT9X/oWNbUIA7Q5i6xzUC
BavdFjvNFNYCEqm9SP/q5PJXBjeoKWNnTCcdaQuP11ASy7CaGwkdFqIyLB4lawtj
U5Grg7PDa16atBS80WwCuesg7V6TfWVE1E6qdTvDK8Ecx6dIaw/o7yRClcH9iEi2
B98m2IuNmaxAUb3IM7QJ6aJ1Iiu9VyQBJJhHnRNvjCankIjhGEHfS7ARVng1WXQb
mFWWsD2MG9GIGg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:53 2026 by rpki-client